$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/8e6923f3-4a15-37a9-9c23-12f8b4c27404.roa File: 8e6923f3-4a15-37a9-9c23-12f8b4c27404.roa (raw, json) Hash identifier: FhxeCsrDUwOADscOtwPWMPED2YE+kf1ce9/wvgiqHR0= Subject key identifier: D0:ED:79:AF:97:39:4C:A1:7E:81:45:0C:55:BA:BE:F6:18:67:20:81 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584D3DFFDE983A7ECF2796D3C640 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/8e6923f3-4a15-37a9-9c23-12f8b4c27404.roa Signing time: Sat 21 Mar 2026 13:00:39 +0000 ROA not before: Sat 21 Mar 2026 13:00:39 +0000 ROA not after: Fri 19 Jun 2026 13:00:39 +0000 asID: 396617 IP address blocks: 209.112.127.31/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:3d:ff:de:98:3a:7e:cf:27:96:d3:c6:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Mar 21 13:00:39 2026 GMT Not After : Jun 19 13:00:39 2026 GMT Subject: CN=4aa4105f-aa47-4da4-93e8-4b6f7beb9bd2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:c1:c1:d1:40:04:8e:b4:50:f3:a9:c5:63:a9: 8d:62:d3:a6:d7:fe:2d:9e:51:96:65:37:4a:c4:2b: c8:a4:b6:a3:ca:26:95:4d:8f:2e:c7:8c:c6:55:26: 96:e2:ae:fd:27:2c:69:07:d5:f2:d6:83:9c:ef:25: d1:bd:1e:4c:b6:76:4d:bc:3c:74:13:04:5d:85:0b: 02:31:d3:3d:7f:6a:88:40:69:d8:bf:90:33:61:45: ef:48:73:84:3e:dc:a5:7c:ca:73:70:da:1a:aa:2d: ff:ab:7a:3a:d2:9e:1c:01:d4:55:99:b6:de:e7:0f: cc:a9:e2:e4:d6:47:35:f3:9f:ef:50:c3:d8:f8:56: ed:d2:47:fa:5e:51:df:ed:bf:b6:79:e5:a3:3d:f5: 6f:4e:f5:73:9c:92:01:e3:d7:2b:47:ef:51:36:e5: 8a:9f:5e:0c:c7:24:c3:e0:6d:b1:a1:b7:6b:fc:03: d4:da:21:41:1c:19:11:25:0a:ed:8d:d9:84:2f:f7: 35:ee:aa:df:04:af:53:ac:59:0a:bd:7b:25:bf:6e: c3:58:f7:42:f2:97:64:d1:19:88:a0:8b:ed:69:73: e1:11:7c:c2:5d:eb:41:69:ef:eb:71:27:8b:89:58: 66:b4:15:18:1b:b3:83:f9:fb:76:56:f0:5e:05:ed: 8f:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D0:ED:79:AF:97:39:4C:A1:7E:81:45:0C:55:BA:BE:F6:18:67:20:81 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/8e6923f3-4a15-37a9-9c23-12f8b4c27404.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv4: 209.112.127.31/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3a:17:4c:f5:d5:e5:41:08:1d:60:cb:b3:56:0c:88:12:e3:48: 98:17:7a:0d:19:d2:fd:d3:f9:2d:ea:83:a9:9d:45:ff:b7:ee: 43:b5:7c:a1:29:d5:dd:69:11:2d:7d:e0:83:f5:f2:d4:55:34: 13:7c:fa:1d:6d:33:1e:3e:09:c8:7a:e8:d7:26:f8:e2:e2:b2: ef:b4:d5:ca:a9:8b:e8:b2:9a:a5:4a:69:8a:79:75:4c:13:65: c7:b0:cc:f5:08:2a:18:22:17:89:3f:cc:4e:e5:d0:c7:e1:05: 98:c2:1c:8c:a6:78:1e:a3:c5:16:6d:f8:f0:1d:f7:31:29:52: 76:2d:5f:b6:b8:3c:af:b6:be:b7:8d:6c:f4:b1:08:2a:b6:e5: bc:86:7f:c1:aa:1b:b2:fd:3a:d1:ba:e0:bb:21:ae:5f:62:f9: 56:c3:3e:dd:77:20:5d:7d:40:dc:35:43:78:5f:fb:c3:1e:81: 08:46:5b:44:63:3a:6c:ec:b6:1a:82:35:94:e1:87:61:e2:eb: 79:03:ec:61:cf:5e:f3:94:a3:8f:99:41:7b:7b:b1:a8:11:c4: 79:ad:4a:3d:64:b8:e7:17:b7:97:a6:f2:29:20:0e:14:f8:1e: de:aa:61:22:9d:d8:80:12:a1:aa:b1:18:99:ff:53:b4:6a:9c: 67:a9:52:38 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWE09/96YOn7PJ5bTxkAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI2MDMyMTEzMDAzOVoXDTI2MDYxOTEzMDAzOVowLzEtMCsGA1UEAxMk NGFhNDEwNWYtYWE0Ny00ZGE0LTkzZTgtNGI2ZjdiZWI5YmQyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk8HB0UAEjrRQ86nFY6mNYtOm1/4tnlGWZTdK xCvIpLajyiaVTY8ux4zGVSaW4q79JyxpB9Xy1oOc7yXRvR5MtnZNvDx0EwRdhQsC MdM9f2qIQGnYv5AzYUXvSHOEPtylfMpzcNoaqi3/q3o60p4cAdRVmbbe5w/MqeLk 1kc185/vUMPY+Fbt0kf6XlHf7b+2eeWjPfVvTvVznJIB49crR+9RNuWKn14MxyTD 4G2xobdr/APU2iFBHBkRJQrtjdmEL/c17qrfBK9TrFkKvXslv27DWPdC8pdk0RmI oIvtaXPhEXzCXetBae/rcSeLiVhmtBUYG7OD+ft2VvBeBe2P1QIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFNDtea+XOUyhfoFFDFW6vvYYZyCBMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvOGU2OTIzZjMtNGExNS0z N2E5LTljMjMtMTJmOGI0YzI3NDA0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUA0XB/HzBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQA6F0z11eVBCB1gy7NWDIgS40iYF3oNGdL90/kt6oOpnUX/t+5DtXyh KdXdaREtfeCD9fLUVTQTfPodbTMePgnIeujXJvji4rLvtNXKqYvospqlSmmKeXVM E2XHsMz1CCoYIheJP8xO5dDH4QWYwhyMpngeo8UWbfjwHfcxKVJ2LV+2uDyvtr63 jWz0sQgqtuW8hn/Bqhuy/TrRuuC7Ia5fYvlWwz7ddyBdfUDcNUN4X/vDHoEIRltE Yzps7LYagjWU4Ydh4ut5A+xhz17zlKOPmUF7e7GoEcR5rUo9ZLjnF7eXpvIpIA4U +B7eqmEindiAEqGqsRiZ/1O0apxnqVI4 -----END CERTIFICATE-----Generated at Thu Mar 26 14:17:41 2026 by rpki-client